updated rails version to 3.0.19. See https://blog.heroku.com/archives/2013/1/11/rails_security_vulnerability/ for more.